Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I disclose personal information for a business purpose without complying with CCPA in California? What are the requirements?

Based on the context documents, a business cannot disclose personal information for a business purpose without complying with CCPA in California. The CCPA defines personal information as information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household [1.1].

The CCPA requires businesses to provide consumers with the right to opt-out of the sale or sharing of their personal information and to limit the use of their sensitive personal information. Businesses must also provide consumers with two or more designated methods for submitting requests for information required to be disclosed pursuant to Sections 1798.110 and 1798.115, or requests for deletion or correction pursuant to Sections 1798.105 and 1798.106, respectively, including, at a minimum, a toll-free telephone number [1.1][1.2].

Additionally, the CCPA defines a business as an entity that collects consumers’ personal information, or on the behalf of which such information is collected and that alone, or jointly with others, determines the purposes and means of the processing of consumers’ personal information, that does business in the State of California, and that satisfies one or more of the following thresholds: (A) As of January 1 of the calendar year, had annual gross revenues in excess of twenty-five million dollars ($25,000,000) in the preceding calendar year, as adjusted pursuant to paragraph (5) of subdivision (a) of Section 1798.185. (B) Alone or in combination, annually buys, sells, or shares the personal information of 100,000 or more consumers or households. (C) Derives 50 percent or more of its annual revenues from selling or sharing consumers’ personal information [1.3].

Therefore, businesses must comply with the CCPA’s notice, disclosure, correction, and deletion requirements when disclosing personal information for a business purpose in California.

Source(s):
Jurisdiction

California